Private Cloud for Dummies

5/19/2018 Private Cloud for Dummies

1/74

Judith Hurwitz

Marcia Kaufman

Make cloud computing an

integral part of your business

Perform in a smart and

proactive manner

Support collaboration between

business and IT

Leverage resources behind thecorporate firewall

Learn to:

PrivateCloud

IBMLimitedEditionComplimentso

f


2/74

These materials are the copyright of John Wiley & Sons, Inc. and anydissemination, distribution, or unauthorized use is strictly prohibited.


3/74

, , y p

Private CloudFOR

DUMmIES

IBM LIMITED EDITION

By Judith Hurwitz andMarcia Kaufman



4/74

, , y p

Private Cloud For Dummies, IBM Limited Edition

Published byJohn Wiley & Sons, Inc.

111 River StreetHoboken, NJ 07030-5774

www.wiley.com

Copyright 2011 by John Wiley & Sons, Inc., Hoboken, New Jersey

Published by John Wiley & Sons, Inc., Hoboken, New Jersey

No part of this publication may be reproduced, stored in a retrieval system or transmitted in anyform or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise,except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without theprior written permission of the Publisher. Requests to the Publisher for permission should beaddressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ

07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permissions.Trademarks:Wiley, the Wiley logo, For Dummies, the Dummies Man logo, A Reference for the Restof Us!, The Dummies Way, Dummies.com, Making Everything Easier, and related trade dress aretrademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates in the UnitedStates and other countries, and may not be used without written permission. All other trademarksare the property of their respective owners. John Wiley & Sons, Inc., is not associated with anyproduct or vendor mentioned in this book.

LIMIT OF LIABILITY/DISCLAIMER OF WARRANTY: THE PUBLISHER AND THE AUTHOR MAKENO REPRESENTATIONS OR WARRANTIES WITH RESPECT TO THE ACCURACY ORCOMPLETENESS OF THE CONTENTS OF THIS WORK AND SPECIFICALLY DISCLAIM ALLWARRANTIES, INCLUDING WITHOUT LIMITATION WARRANTIES OF FITNESS FOR APARTICULAR PURPOSE. NO WARRANTY MAY BE CREATED OR EXTENDED BY SALES ORPROMOTIONAL MATERIALS. THE ADVICE AND STRATEGIES CONTAINED HEREIN MAY NOT BESUITABLE FOR EVERY SITUATION. THIS WORK IS SOLD WITH THE UNDERSTANDING THATTHE PUBLISHER IS NOT ENGAGED IN RENDERING LEGAL, ACCOUNTING, OR OTHERPROFESSIONAL SERVICES. IF PROFESSIONAL ASSISTANCE IS REQUIRED, THE SERVICES OF ACOMPETENT PROFESSIONAL PERSON SHOULD BE SOUGHT. NEITHER THE PUBLISHER NORTHE AUTHOR SHALL BE LIABLE FOR DAMAGES ARISING HEREFROM. THE FACT THAT ANORGANIZATION OR WEBSITE IS REFERRED TO IN THIS WORK AS A CITATION AND/OR APOTENTIAL SOURCE OF FURTHER INFORMATION DOES NOT MEAN THAT THE AUTHOR ORTHE PUBLISHER ENDORSES THE INFORMATION THE ORGANIZATION OR WEBSITE MAYPROVIDE OR RECOMMENDATIONS IT MAY MAKE. FURTHER, READERS SHOULD BE AWARETHAT INTERNET WEBSITES LISTED IN THIS WORK MAY HAVE CHANGED OR DISAPPEAREDBETWEEN WHEN THIS WORK WAS WRITTEN AND WHEN IT IS READ.

For general information on our other products and services, please contact ourBusiness Development Department in the U.S. at 317-572-3205. For details on how tocreate a customFor Dummies book for your business or organization, contact [email protected]. For information about licensing theFor Dummies brand for products orservices, contact BrandedRights&[email protected].

ISBN: 978-1-118-15263-8

Manufactured in the United States of America

10 9 8 7 6 5 4 3 2 1



5/74

, , y p

Table of Contents

Introduction ....................................................... 1

About This Book ........................................................................ 1

Foolish Assumptions ................................................................. 2

How This Book Is Organized .................................................... 3

Icons Used in This Book ............................................................ 3

Chapter 1:Building the Business Case for the Cloud . . .5

Knowing What the Cloud Means to You ................................. 6

Helping the Business to Change through the Cloud ............. 7

Journeying from Virtualization

to the Private Cloud ............................................................... 7

How does virtualization add efficiency? ....................... 8

Starting with cloud computing

through virtualization ................................................. 9

Setting the Record Straight: What Is a Private Cloud? .......... 9Coming into the Picture: The Hybrid Cloud ......................... 11

Example 1: Commodity e-mail services ...................... 12

Example 2: Developing and testing a

new application .......................................................... 12

Example 3: Using public cloud based

sales automation with private clouds ..................... 13

Example 4: A public community cloud

helps partnerships ..................................................... 13

Developing a Private Cloud Strategy ..................................... 14

Chapter 2:Looking into the Foundationsof Private and Hybrid Clouds . . . . . . . . . . . . . . . . . . . .15

Getting Straight with Infrastructure as a Service ................. 16

Looking into private IaaS .............................................. 17

Dynamic provisioning, scheduling of resources ....... 17

Dynamic provisioning and scheduling ......... 18

Dynamic provisioning and schedulingin a private cloud ......................................... 19Self-service imperative: Business priorities

and efficiency of the data center............... 20Using IaaS in conjunction with the data

center and other private cloud services .... 20

http://users/Shared/Christin%20Production/Hold%20Then%20Trash/8%20(August)/8.12/TOC/9781118152638-intro.1.pdfhttp://users/Shared/Christin%20Production/Hold%20Then%20Trash/8%20(August)/8.12/TOC/9781118152638-intro.1.pdfhttp://users/Shared/Christin%20Production/Hold%20Then%20Trash/8%20(August)/8.12/TOC/9781118152638-intro.1.pdfhttp://users/Shared/Christin%20Production/Hold%20Then%20Trash/8%20(August)/8.12/TOC/9781118152638-intro.1.pdfhttp://users/Shared/Christin%20Production/Hold%20Then%20Trash/8%20(August)/8.12/TOC/9781118152638-intro.1.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch01.2.pdfhttp://users/Shared/Christin%20Production/Hold%20Then%20Trash/8%20(August)/8.12/TOC/9781118152638-intro.1.pdfhttp://users/Shared/Christin%20Production/Hold%20Then%20Trash/8%20(August)/8.12/TOC/9781118152638-intro.1.pdfhttp://users/Shared/Christin%20Production/Hold%20Then%20Trash/8%20(August)/8.12/TOC/9781118152638-intro.1.pdfhttp://users/Shared/Christin%20Production/Hold%20Then%20Trash/8%20(August)/8.12/TOC/9781118152638-intro.1.pdfhttp://users/Shared/Christin%20Production/Hold%20Then%20Trash/8%20(August)/8.12/TOC/9781118152638-intro.1.pdf


6/74

, , y p

Private Cloud For Dummies, IBM Limited Editioniv

Expanding into Platform as a Service .................................... 21

Application development and execution services .... 22

Integrated lifecycle services......................................... 23Workload management services .................................. 24

Data management services ........................................... 25

Linking Business Services Together ...................................... 26

Improving productivity ................................................. 27

The Cloud as catalyst for

business transformation........................................... 27

Chapter 3:Managing the Hybrid Cloud . . . . . . . . . . . . . .29

Handling the Multi-Platform Environment ............................ 30Common operational services ..................................... 31

Federation of resources ................................................ 32

Platform planning .......................................................... 32

The Service Level Imperative ................................................. 33

Managing Workloads ............................................................... 34

The batch workload ...................................................... 35

The analytics workload ................................................. 35

Transactional workloads .............................................. 35

Putting Virtualization In Context ........................................... 36Managing Virtualization .......................................................... 36

Chapter 4:Locking Down Securityand Governance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39

Understanding Security Risks ................................................ 40

Alleviating the risks ....................................................... 40

Combining security requirements

for private and public clouds ................................... 42Assessing private cloud security requirements ........ 42

Building a Secure Private Cloud ............................................. 43

Ensuring data protection .............................................. 43

Managing access and identity ...................................... 44

Provisioning for secure environments ........................ 45

Controlling governance and audit............................... 45

Dealing with intrusion ................................................... 46

Looking into Best Practices for Securing the

Hybrid environment ............................................................ 46Evaluating the Risks and Creating a

Cloud Security Strategy ....................................................... 48

http://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch04.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch03.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch02.2.pdf


7/74

, , y p

Table of Contents v

Chapter 5:Integrating with and within Clouds . . . . . . .51

Understanding the Need for Cloud Integration .................... 51Looking at the Requirements for Cloud Integration ............ 53

Connectivity ..................................................... 54Transformation ................................................ 55Business logic .................................................. 55Management .................................................... 56

Studying Cloud Integration Cases .......................................... 57

Connectivity to clouds .................................................. 57

Connectivity between clouds ....................................... 58

Connectivity in clouds .................................................. 58Maintaining Governance and Security of Data ..................... 59

Securing access to data ................................................ 59

Securing the connection ............................................... 60

Chapter 6:Starting Your Cloud Journey . . . . . . . . . . . . .61

Looking into the Business Imperative

for the Private Cloud ........................................................... 61

Defining the Role of IT ............................................................. 62

Considerations when Planning the Private Cloud ............... 63Business considerations............................................... 64

How is the business changing? ...................... 64How does the company want to

provide services in the future?.................. 64What are the financial constraints

for the company? ......................................... 64Is the company too siloed

for the strategy? ........................................... 64

Is there an easy mechanism to encourageexperimentation and innovation? ............. 65

Implementation considerations ................................... 65

Evaluating reference architectures ............... 65Focusing on efficiency and flexibility ........... 65Planning for a fabric of services .................... 65Assuming that youll plan for a

lightweight approach .................................. 66Monitoring and managing

everything you do ....................................... 66

http://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch06.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdfhttp://users/ahassos/Desktop/9781118152638/9781118152638-ch05.2.pdf


8/74

, , y p

Publishers AcknowledgmentsWere proud of this book and of the people who worked on it. For details on how to

create a customFor Dummies book for your business or organization, contact [email protected]. For details on licensing theFor Dummies brand for products orservices, contact BrandedRights&[email protected].

Some of the people who helped bring this book to market include the following:

Acquisitions, Editorial, and Media

Development

Project Editor: Carrie A. Burchfield

Editorial Manager:Rev Mengle

Business Development Representative:Sue Blessing

Custom Publishing Project Specialist:Michael Sullivan

Composition Services

Sr. Project Coordinator: Kristie Rees

Layout and Graphics: Melanee Habig,Christin Swinford

Proofreaders: Laura Albert,Jessica Kramer

Special Help: IBM Cloud Team

Publishing and Editorial for Technology Dummies

Richard Swadley,Vice President and Executive Group Publisher

Andy Cummings,Vice President and Publisher

Mary Bednarek,Executive Director, Acquisitions

Mary C. Corder,Editorial Director

Publishing and Editorial for Consumer Dummies

Kathleen Nebenhaus, Vice President and Executive Publisher

Composition Services

Debbie Stailey,Director of Composition Services

Business Development

Lisa Coleman,Director, New Market and Brand Development

About the Authors

Judith Hurwitzand Marcia Kaufmanare cofounders of Hurwitz &Associates, a business technology consulting and research firm focusedon cloud computing and the business value of technology investments.The team at Hurwitz & Associates have authored numerousFor Dummiesbooks.



9/74

, , y p

Introduction

Welcome toPrivate Cloud For Dummies, IBM LimitedEdition. Whether public, private, or hybrid, cloud

computing is becoming an increasingly integral part of many

companies business and technology strategy. In an attemptto keep up with business innovation and change, companiesare turning to flexible, elastic, and self-service computingresources that they can easily manage and scale in the cloud.

Cloud computing serves different needs for different constitu-ents within your organization. For business leaders, cloudcomputing is a cost-effective way to leverage IT resources toprototype and implement strategic change. For your IT organi-

zation, the cloud is a platform that allows it to be significantlymore proactive and responsive when it comes to supportingstrategic business imperatives. While IT is leading the chargein focusing on best practices that support the balanced useof public, private, and data center resources the emergingworld of hybrid computing dont lose sight of the fact thatcloud is just as much about business model transformationas it is about technology transformation. In fact, many compa-nies find that the cloud helps to support increased collabora-

tion between business and IT leaders enabling them to morequickly adjust to changing market dynamics.

This book gives you some insights into what it means tocreate flexible pools of computing resources that break downsilos in your company so you can perform in a smart and pro-active manner.

About This BookThere has been a lot of confusion in the market about pri-vate and hybrid clouds what they are and how they canbe implemented to help the business get the benefits of thecloud while leveraging internal resources that are behind thecorporate firewall. Many companies want to be able to have



10/74

, , y p

Private Cloud For Dummies, IBM Limited Edition2

pools of computing resources based on a self-service modelwhere the company owns and operates those resources. With

a private cloud model, these resources are standardized andautomated. The reality is that most companies manage work-loads across the data center, and public and private clouds creating hybrid environments. This book helps put the privatecloud model of computing into perspective for both businessand technical leaders. In addition, the topics covered in thisbook are critical to the success of hybrid environments. If youlike what you see in this book, you may like the full edition ofPrivate Clouds For Dummiescoming out in 2012.

Foolish AssumptionsThis book is useful to many people, but we have to admit thatwe did pick a segment of the world to focus on forPrivateClouds For Dummies. Heres who we think you are:

Youre already using various forms of cloud computingand are planning a long-term strategy. Perhaps werepreaching to the choir. You understand that the benefitsof using all kinds of flexible cloud computing models rep-resent sources of sustainable competitive advantage.

Youre a business leader who wants IT resources to be autility thats optimized to leverage existing technology.You want IT to serve your business needs you want tobe able to execute your strategy on your timetable. You

want IT to be your partner in innovating for the future.

Youre an IT leader who knows a lot about technologybut arent sure precisely how cloud computing public,private, or a combination of the two as a hybrid model works. You need to understand how cloud computingchanges IT and what you need to do to support the busi-ness with cloud computing as an important enabler.



11/74

, , y p

Introduction 3

How This Book Is OrganizedThis book isnt intended to be an exhaustive technical manualon implementing and managing cloud computing. Rather,in this minibook, we give you a taste of the concepts andapproaches you need to consider when embarking on yourjourney to the private cloud.

Weve organized this book into six chapters:

Chapter 1 gives you an overview of the business case forthe private cloud what it means to the business andexactly what a public, private, and hybrid cloud is.

Chapter 2 provides you with an understanding of thetechnical foundation for private and hybrid clouds,including a discussion of Infrastructure as a Service,Platform as a Service, and Process as a Service.

Chapter 3 delves into the issues of managing a hybrid

environment and the workloads that need to be sup-ported within that environment.

Chapter 4 provides an overview of the security and gov-ernance issues you need to consider.

Chapter 5 explains the approaches for integratingbetween and within cloud environments.

Chapter 6 gives you a roadmap for planning your journeyto the private cloud from a best practices perspective.

Icons Used in This BookThe following icons are used to point out important informa-tion throughout the book:

Tips help identify information that needs special attention.

Pay attention to these common pitfalls of managing your pri-vate cloud.



12/74

, , y p


This icon highlights important information that you should

remember.

This icon contains tidbits for the more technically inclined.



13/74

, , y p

Chapter 1

Building the BusinessCase for the Cloud

In This Chapter Figuring out what the cloud means to you

Changing business through the cloud

Making the change from virtualization to the cloud

Defining the private and hybrid clouds

Coming up with a private cloud strategy

Cloud computing isnt just a group of computingresources sitting in a remote island. Rather the cloud is

a computing model for enabling cost-effective business out-comes through the use of shared application and computingservices. Increasingly, business leaders are using cloud com-

puting to rapidly change business models and business pro-cesses. They are relying on cloud computing to experimentand impact revenue models. Cloud computing touches everyaspect of the computing environment. It turns traditionallysiloed computing assets into a shared pool of resources sonot only do you get to share servers, but you can also sharenetworks, storage, applications, and services. And, when youshare everyone is a winner.

In this chapter, you discover the value of the private andhybrid cloud to your business. This chapter explains howcloud computing can help your business innovate without risk-ing capital thereby enabling you to experiment and pilotnew business opportunities in a rapid fashion, identifying thoseideas that work, but also crossing off the ideas that dont.



14/74

, , y p


Knowing What the CloudMeans to You

Corporations are complicated theyre composed of a widerange of different people who have different responsibilitiesto make the business run like a charm. The value of the cloudis that it provides significant value no matter what your rolein the business may be. So based on your responsibilities thecloud means different things. So who are you?

If youre a business user,youll want to have efficientaccess to IT resources when you need them without thered tape and delays.

If youre an application developer,you want to have use ofa platform that gives you development tools, middleware,and capacity so you have a well-tuned computing environ-ment to help you focus on providing the best value for the

business. You also want to put your skills to good use work-ing on innovative projects instead of spending time config-uring and reconfiguring complicated middleware.

If youre an IT operations manager,you want to supportan environment that can expand and contract based onbusiness requirements. You want a safe and managedenvironment that has predictable workload management.And you want to keep business leaders happy.

If youre a business strategy planner,you want to testout new business models without risk. You want a flex-ible environment that lets you try new business modelswithout costly upfront investments.

If youre a member of the corporate management team,you want to manage expenses and risks. You need tomodulate your computing environment so you canmaintain control over costs. You want your computingenvironment to be the nexus of your differentiation for

supporting innovation to delight your best customers,suppliers, and partners.



15/74

, , y p

Chapter 1: Building the Business Case for the Cloud 7

Helping the Business to Changethrough the Cloud

Much confusion surrounds cloud computing and why itsbecoming so important to business. The most obvious reasonthat businesses initially consider cloud computing is becausebusiness leaders want a more predictable and cost-effectiveway to acquire and manage computing resources. Businessleaders want IT to be able to change their computing environ-

ments as quickly as their needs change.

For many organizations, public cloud services can fill a needfor rapid access to affordable computing resources. Manybusinesses have begun to use Software as a Service (SaaS)offerings such as Customer Resource Management (CRM)to support their highly distributed sales teams. With thesecloud-based applications, companies dont have to purchasetheir own hardware and supporting infrastructure. All the

SaaS elements, including data, networking, storage, and man-agement software, are operated by a third party. Likewise,this same company may find other SaaS applications that helpwith transaction management or data analytics. During peakperiods, the company may use a cloud service to add morestorage services for a short timeframe.

After business got a taste of the potential of cloud computing,business leadership began to understand that cloud computing

could become a powerful engine of managing growth effectively.Therefore, business leaders are looking to transform their owndata centers to support changing computing requirements. Thisboon has led to companies beginning to rethink the data centerand the related services they need to have the flexibility andmanageability the business and its constituents demand.

Journeying from Virtualizationto the Private CloudCompanies tend to incrementally move to the private cloud.Often this journey begins with virtualization. Virtualizationis atechnique for separating resources and services from the under-lying physical delivery platform or environment. Why is it needed?



16/74

, , y p


Most computer operating systems (including Linux andWindows) arent designed to efficiently handle workloads. In

fact, the typical server is terribly inefficient. In the old days,it didnt seem to matter very much. Server hardware wasinexpensive, and if an application got bigger, the IT organiza-tion simply added more servers. But over time, all those serv-ers made a mess of things. The servers took up a lot of floorspace and used too much power. So companies discoveredthat with virtualization it was possible to abstract the hard-ware so it could be used more efficiently.

Therefore, virtualization is one of the most effective ways toreduce capital expenditures. Why is this true? Typically onlyless than 10 percent of an average server is used at any onetime. Most of the time, these servers are sitting idle. After acompany virtualizes its servers, utilization can be as high as80 percent. So a lot of the compute resources that companieshave invested in provide no benefit. Making matters worse,even those unused resources require a lot of manual manage-ment of the equipment.

How does virtualizationadd efficiency?

Virtualization has three technical capabilities that help withefficiency:

It allows multiple operating systems and applications tobe supported on a single physical system.

It allows each of these virtual machines to be isolatedfrom each other and from the physical hardware.

It allows optimal utilization of the physical serverresources.

With encapsulation, all the components needed to run an appli-

cation can be put into a container so it runs without interfer-ence from other applications. With virtualization techniques,just about anything can be virtualized, including memory,networks, storage, hardware, operating systems, and applica-tions. Virtualization platforms provide a set of resources andtechniques for managing the efficient and secure operationof resources in an effective manner. This foundation enablesgreater utilization of the underlying hardware.



17/74

, , y p


Starting with cloud computing

through virtualizationMany IT organizations have had great success with virtual-ization. It has enabled them to get more efficient use of theirresources and save money on hardware, floor space, andpower. Whats important about virtualization is that it helpscompanies take the first step toward a more efficient way toleverage their IT assets. Virtualization has enabled companiesto decouple their assets from their physical platforms. It pro-

vides the right steps toward balancing workloads and movingthose workloads to where they can be more efficiently used.But it doesnt go far enough. Cloud computing leverages theabstractions of hardware, software, applications, and storageand networks of the virtualization environment. In essence,virtualization now transforms physical silos into a pool ofresources one of the key principles of cloud computing. Bybeginning with virtualization, organizations focus on the man-agement of resources. Without this focus on manageability,

cloud computing is very difficult to implement.

Almost all vendors that sell public cloud services rely onvirtualization as one of the techniques for optimizing theirplatform. Likewise, organizations implementing private cloudsneed virtualization to ensure that workloads are well bal-anced and well managed at the physical level. While virtual-ization itself is very valuable, its only part of the solution. Infact, many companies assume that if they have implemented

virtualization, they have a cloud. This isnt true. After virtual-ization has been implemented, you still need to standardizeand automate how those virtualized workloads are managed.Combining virtualization with automating the delivery of thoseservices creates a cloud platform.

Setting the Record Straight:What Is a Private Cloud?

In many situations a public cloud platform may not be themost appropriate environment for an organization. Whilecompanies like the freedom of the public cloud, they needmore control, more security, and better flexibility. So compa-nies typically adopt whats called a private cloud. Whats a



18/74

, , y p


private cloud? Im glad you asked. Aprivate cloudis a highlyvirtualized data center that sits behind a companys firewall.

A private cloud is more cost effective for companies thatalready own a lot of computing resources. These same compa-nies may have requirements for a higher level of security thancan be guaranteed in a public cloud service.

What makes a private cloud different than a data center thatincludes some server virtualization? Check out these definitions:

A private cloud includes automation of consistent pro-

cesses and a self-service interface that allows internaldevelopers to provision services on demand.

A private cloud is highly automated in terms of how itmanages pools of resources including everything fromcompute capability to storage, analytics, process man-agement, and middleware.

A private cloud offers a well-managed environment basedon common services to improve the efficiency of the

environment.

A private cloud implements sophisticated security andgovernance capabilities specially designed for a com-panys requirements.

A private cloud is owned and operated by a single com-pany that controls the way services are expensed to vari-ous departments and partners.

A private cloud controls the service level of the platformbased on constituent needs and compliance requirements.

So what does this mean in the real world? Here is an example.A major retailer has managed its own traditional data centerfor the last 30 years. While in the beginning the environmentwas nice and neat, it has changed over the years. Originally,only a few computers existed and managing and self-containingthem were relatively easy. However, that simple environment

didnt last long. Over time, the company grew fast. It beganpurchasing new systems, new applications, new network-ing and the like. While there was a lot of scrutiny over whichsystems to buy, there was no way to control its growth. Therequirement was simply to support the business needs forcomputing. Therefore, over the years the IT operation becameincreasingly complex and difficult to manage. When thebusiness needed to change and provide new differentiated



19/74

, , y p


services to its ecosystem of partners, it often took too longto execute. The pace of innovation slowed, and the company

found that it was in danger of losing its competitive edge.

The CEO called a meeting of his executive team. It was timefor a change. To make a very long, drawn out story short, theteam decided that it would segregate its data center into twosegments:

One that included the many systems of record (account-ing, specialized market software, and so on) that dont

impact new business models. These systems all operateon a variety of hardware platforms, supporting many dif-ferent types of middleware and operating systems.

The other segment of the data center included analy-tics and application streaming workloads as well as thecustomer help desk. This segment was transformed intoa private cloud. The company consolidated servers andimplemented virtualization. It added a consistent operat-ing system and middleware and development tools.

The entire environment was restructured so it could be opti-mized for performance. Self-service was added as the primaryway that authorized users could access resources based onauthorization rules built into the private cloud. The IT organiza-tion decided to standardize on a set of development tools andplatform, instituted as a standard for the software developmentorganization. This eliminated the possibility of having too many

different tools that made maintenance into a nightmare.

But the organization didnt stop there. They added businessprocess management software so rules and processes thatwere required from a business model requirement could beimplemented in software rather than on paper.

Coming into the Picture:The Hybrid CloudIn reality, a private cloud doesnt exist in isolation from therest of the data center and the public cloud. In fact, mostorganizations that adopt a cloud computing strategy discoverthat a hybrid approach fits well into their IT strategy. So what



20/74

, , y p


does a Hybrid Cloud mean? A hybrid cloudis a combinationof a private cloud foundation with strategic use of public

cloud services. A hybrid cloud often leverages services thatrun within the data center as well. The best way to explain ahybrid cloud is to give you a couple of examples.

Example 1: Commoditye-mail services

A company may decide to use a public cloud service for aworkload, such as electronic mail. Why is electronic mail sucha good candidate for a public service?Electronic mail(e-mail)is a relatively simple application with a simple workload.Companies that specialize in public cloud e-mail services canoptimize their hardware and software environment to supportthis type of workload. They can specialize in providing differ-ent levels of security for a price. In reality, these companiescan provide e-mail services for a fraction of the price that it

costs to run and support an internal mail service. Even moreimportant to many business executives is the fact that e-mailisnt a strategic service that adds value to the bottom line.As long as the e-mail vendor is trustworthy, companies areseeing the benefit of using this type of public cloud service.So a company with a private cloud often chooses a publice-mail service thus the companys approach is a hybrid combining some public services for capabilities that are com-modity with private services based on the ability to deliver

fast innovation to their ecosystem.

Example 2: Developing andtesting a new applicationTesting new applications can be a complicated task. Tomake sure that the application can work as advertised mayrequire a lot of computing resources to simulate real worldconditions. In the old days, companies used to acquire hugenumbers of servers to conduct these tests, or they licensedsoftware that simulated the usage of the application. Withthe advent of public cloud testing services, a company canleverage a testing-as-a-service environment on a one-timebasis to make sure that the application performs as expected.



21/74

, , y p


Likewise, a company may want to experiment with developinga new application. Instead of purchasing hardware, middle-

ware, operating systems, and development tools, it may bemore cost effective to develop that prototype application on apublic cloud platform. If the prototype is successful and there-fore strategic, the subsequent development could be movedto the private cloud.

Example 3: Using public cloud

based sales automation withprivate cloudsThere was a time when all sales automation software wasimplemented in the data center. With the advent of offer-ings, such as salesforce.com and SugarCRM, companies areincreasingly discovering that it is practical to pay a per userper year price and leave the day-to-day management to atrusted vendor. But many companies also want to keep con-trol over some of their most sensitive data. Therefore, theymay choose to keep data about prospects on a public cloud.However, after those prospects become customers, they maynow store that data in their private cloud. If a company is in ahighly regulated market, such as financial services or health-care, it may also want to keep that data on a private cloud.

Example 4: A public communitycloud helps partnershipsAt times, two or more companies partner on a strategic initia-tive. Instead of implementing a shared environment in onecompanys data center, companies increasingly rely on com-munity cloud environments as a pragmatic meeting place.This community allows companies to move quickly to estab-lish the components they need whether they are documents

or statistics. After the collaboration is over, the companies nolonger pay for the expanded resource.



22/74

, , y p


Developing a PrivateCloud Strategy

Before you begin your journey to the private cloud, you mustestablish a roadmap. If you dont know where youre going,youll never get to your destination. Ask yourself the followingquestions:

What do you want to do with your private cloud?

Do you want to have a more flexible way to use yourexisting resources so that services can be provided withless overhead?

Do you want to have a more proactive way to offer newinnovative and revenue producing services to customers?

What does your current environment look like?

What are the characteristics of the workloads that you

support?

After you understand your goals, you need to understandwhere you are today. Understanding your current environ-ment helps you determine how to get started. For example:

You may want to start with piloting a cloud service thatdemonstrates value quickly.

You may want to start by virtualizing servers and addingautomation to how those servers are managed.

You may want to set up a self-service portal so develop-ers can provision the required resources they need tostart mission critical projects.

After youre able to prove business value, you can continueon your journey and truly impact the business.



23/74

, , y p

Chapter 2

Looking into theFoundations of Private

and Hybrid CloudsIn This Chapter Understanding infrastructure as a service

Peering into platform as a service

Managing business process as a service

The path to the private and hybrid models of computingrequire a well thought out and planned strategy. Many

companies start their journey to the cloud by doing someserver virtualization or selecting a few Software as a Service(SaaS) applications. While this approach can be pragmatic for

getting some experience with cloud-based environments, itisnt sufficient in a competitive environment. To get true valuefrom cloud computing requires a strategy for automating andstandardizing a set of services around a collection of bestpractices that support a new level of innovation. By automatingthe routine functions, organizations can focus on new revenueopportunities.

In Chapter 1, we set the table for what a private cloud means

for the business (go ahead and flip back there if need be). Ifyou read that chapter, we hope that weve convinced youthat there are some real benefits in leveraging this platformto transform your business by increasing the flexibility ofcomputing. However, many different capabilities and servicesare required. In this chapter, we focus on the foundationaltechnologies that should be part of your private and hybridcloud strategy.



24/74

, , y p


Getting Straight withInfrastructure as a Service

Infrastructure as a Service (IaaS) is one of the most straight-forward cloud delivery models. IaaS is the delivery of computingservices including hardware, networking, storage, and datacenter space based on a rental model. This means that theconsumer of the service acquires a resource and is chargedfor that resource based on amount of resource used and the

duration of that usage.

Many business units have discovered that they could easilybypass the IT department and use their corporate creditcards to provision IT services. For small temporary projectsthis can be a pragmatic and cost-effective solution. However,even at a few cents per CPU hour or Megabytes of storage,expenses can add up to significant cash. Those small amountsof money spread over dozens of departments add up to

significant expenses. Even more complicated are issuesrelated to the ability to track IT governance. If a business usercreates important content through an IaaS service, theresno accountability. For example, almost no IaaS vendor willrelease usage logs to its customers. If a customer is storingdata within a public IaaS platform, theres typically no way todetermine where that datas being stored.

Life isnt black and white: there are always shades of gray. In

many situations, a project isnt mission-critical or a companysimply needs some extra resources for a project. For example,in a three-week period a development team may need extrastorage, but purchasing physical storage systems for tem-porary needs makes no sense. Likewise, in some situationsan online vendor may need extra computing and networkingcapabilities during the holiday rush. Purchasing extra systemresources based on a short-term increase in demand for yourproducts doesnt make economic sense, either.

Business users and IT developers are drawn to the easeof acquiring IaaS services. They simply go to a self-serviceinterface and provide a credit card number, and an image ofcompute or storage services is provided almost instantly. Thetruth is that the traditional methods of acquiring computingresources simply havent kept pace with business urgency.



25/74

, , y p

Chapter 2: Looking into the Foundations of Private and Hybrid Clouds 17

But an alternative approach exists for companies who want tocombine the flexibility of IaaS with the security, and resource

management of a controlled IT environment are looking atprivate IaaS implementations. These private cloud implemen-tations are often implemented in conjunction with public IaaSservices in a hybrid manner.

Looking into private IaaSMany companies are looking to implementing a private

version of IaaS. In essence, a company creates a pool ofresources that can be standardized and easily reused by theIT organization to complete projects. Why standardized? In anIaaS service, IT projects are created in predictable ways.

For example, a process may be designed to set up a testenvironment for code or provision storage to support anapplication. While certain nuances are different, 80 percent ofthe time the process within IaaS can be standardized. By

standardizing these infrastructure services, the organizationgains efficiencies, fewer inadvertent errors, and the ability toensure consistency of managing the development lifecycle.

Another benefit of a private cloud service is overallmanageability. One of the overarching benefits of IaaS is theability to gain access to an image or copy of a set of resourcesthat can be acquired via a self-service process.

While a public cloud vendor uses the self-service portal toensure that the customer pays for the service, IaaS can beused differently in the private cloud. When a developerprovisions a resource from a private cloud, IT managementcan make sure that when a project is completed, the resource(for example, compute resources or storage) is returned tothe pool of resources. In this way, IT can better control whatresources are available for projects and can control costs,utilization, and security.

Dynamic provisioning, schedulingof resourcesCompanies that operate IaaS for a living are much bigger thanwhat you would see in the typical corporation. However, it is



26/74

, , y p


quite reasonable that leveraging the right software incombination with your existing IT resources helps you create

a version of your virtualized environment inside your owncompany.

What do you have to do? Well, before we tell you the secret,you have to understand the concepts behind dynamicprovisioning and resource scheduling.

Dynamic provisioning and schedulingSay that youre running an online retail site. You create a sitethat assumes youll have about 100,000 visitors per day whobrowse and sometimes buy your wares. Your organization hasmany IT assets because its business value is directly relatedto its IT-based services. So the company created an internalself-service portal that allows developers to get the resourcesthey need to keep the business running on the web. Thisinternal service allows compute, storage, and networkingresources to be dynamically allocated to the developer basedon the project theyre engaged in at the time. Those resourcesmay be scheduled for use based on how critical that service isoverall.

By enabling this rules-based, dynamic provisioning, thedevelopers can more quickly manage their resources andacquire new ones at the right time without waiting. Becausethis dynamic provisioning is based on company policy basedon the project, the developer is basically preapproved for useof the right resources. However, many companies design aworkload management process that keeps priorities in check.

For example, if a critical application requires additionalresources at the end of a fiscal quarter, the project beingdeveloped may have to be scheduled to leverage thoseresources at a different time or from a different pool ofservices.

Sometimes a need for services cant wait until those resourcescan be allocated. Spikes of demand for additional computingresources exist. For example, holidays, Christmas, or annualsales may cause your visitors spike to 300,000 in a single day.Rather than buy extra servers to accommodate peak loads,the company will rent some extra resources for the day oreven a few hours typically from a public cloud service.



27/74

, , y p


This can happen because of software that automatically ordynamically allows those resources to be allocated.

In a public cloud IaaS, the customer visits a self-service portaland initiates a request for a certain amount of storage or CPUcapacity. Once that user provides a valid credit card number,those resources are automatically allocated or provisionedto that user. When the user stops paying, those resourcesdisappear.

Dynamic provisioning and scheduling in a private cloudYou want to be able to allow a developer to acquire moreresources for a specific project without having to run out andbuy more hardware. In essence, you create a pool of computingor storage resources that dont belong to one departmentor one application. You provide a self-service interface orportal for users. In addition, most organizations will add somerules that control what and how a developer can use theseresources.

For example, a developer is working on a new project. Heneeds an extra terabyte of storage to get the project done. Hegoes to the self-service portal and requests a terabyte ofstorage. The system includes a rule that authorizes theprogrammer to get that storage. However, if he decides that itwould be better to get two terabytes, the rules built into thesystem will reject that request. Even more important, afterthat project has ended, the system can be designed to releasethat terabyte of storage so it can be used for other purposes.In this way, a company can regulate how those resources andwhen resources are used.

Of course, this request could be done manually, but that isntvery practical or cost effective.

Establishing a dynamic provisioning model ensures that acompany can codify rules and procedures. In addition, thescheduling capability makes sure that the pool of resourcesis managed in the most effective manner. Likewise, softwarewithin the computing environment manages the way allworkloads are efficiently balanced. There will be times whenone application must have priority for resources aboveanother one. This type of resource scheduling is critical to thesmooth operations of a dynamic computing environment.



28/74

, , y p


Self-service imperative: Business prioritiesand efficiency of the data centerYou cant have a discussion about the technical foundation ofIaaS without understanding the imperative of self-service. Thebanking ATM service is a great example of the business valueof self-service. Without the availability of the self-service ATM,banks would be required to use costly resources to manageactivities of all their customers even for the most repetitivetasks. With an ATM, repetitive tasks can be easily handledwith a self-service interface. The customer makes a direct

request to perform routine transactions that conform topredefined business rules.

For example, a customer must have an account to withdrawmoney. In addition, the customer cant take out more moneythan is in her account. There may be rules that dictate howmuch money an individual is allowed to withdraw from theATM. This process is precisely how self-service works in theIaaS environment. In a private cloud environment, management

can enable users to provision resources when they need thembased on a set of predefined rules and business priorities. Inthis way, everyone is satisfied. The business also gets tocontrol expenses and reduce capital expenditures. Thebusiness units have the freedom to avoid time consumingprocesses that slow down the ability to get the job done.

Many organizations that leverage IaaS opt for a hybridapproach using both private services in combination with

public IaaS services. Why is this approach attractive? Acompany can effectively leverage its own private cloudresources but use trusted public cloud services to managepeak loads. When organizations use this hybrid approach in acontrolled way, its effective. Control means that a companyestablishes rules for when and how business units can use anoutside cloud service and therefore is better able to controlcosts. In addition, by implementing distinct usage rules, userscan be prevented from storing sensitive data on a public

cloud.

Using IaaS in conjunction with the datacenter and other private cloud servicesPrivate clouds dont exist in isolation from the traditional datacenter and other cloud services operated by partners or



29/74

, , y p


suppliers. In many situations, the private cloud services areused in conjunction with information thats managed within

the data center.

For example, business units typically leverage the informationfrom critical business applications, such as customer serviceapplications, accounting systems, and product line systems.Companies often create a hybrid environment with their keytrading partners based on a combination of data from the datacenter with a customized web-based system that may live ineither a private or public cloud. Integration between clouds

and data centers is a key component in success.

Expanding into Platformas a Service

In addition to leveraging compute, storage, network services

in the form of IaaS, organizations expanding their use of cloudcomputing typically need a platform to create, deploy, andmanage their cloud environment. This is true for companiesbuilding an application in the cloud thats deployed to a datacenter or for companies building a public or private cloud. Anintegrated environment that supports the development andmanagement of cloud-based application is called Platform as aService (PaaS).

What is PaaS? PaaS is an entire infrastructure packaged so itcan be used to design, implement, and deploy applicationsand services in a public or private cloud environment. PaaSenables an organization to leverage key middleware serviceswithout having to deal with the complexities of managingindividual hardware and software elements.

According to the National Institute of Standards andTechnology (NIST), a U.S. federal government agency

established to design technology standards, PaaS is theability to provide a computing environment and the relateddevelopment and deployment stack needed to deliver asolution to the consuming customer. This means that acomputing environment PaaS requires a complete stack ofdevelopment tools that are accessible via a web browser.



30/74

, , y p


This abstracted (where the details of implementation arehidden from the user) stack is therefore designed to be

cloud-based so the developer can use a self-service portalinterface to create enterprise applications without having toacquire and deploy platform tools. In order to provide thislevel of abstraction, a number of components have to beincluded in a PaaS platform:

Application development and execution services

Integrated lifecycle services

Workload management services

Data management services

Application developmentand execution services

Application development and execution services are the heart

of the PaaS environment. Theyre the anchor services thatmake the process of developing and executing applicationsin the cloud more streamlined. A PaaS platform providesthe developer with a complete environment to design anddevelop applications. It includes the following services:

Application design and development

Application deployment

Application Testing (such as load and performancetesting)

Middleware topology design and development

Catalog of middleware components

Application integration and connectivity

Application and system health management (the integrityof the overall application)

Runtime management to ensure execution of theapplication

Application resources, including database and messaging

Security and identity management

Multi-tenancy so that each customer has a dedicatedspace isolated from other customer environments



31/74

, , y p


These services make it possible for the developer to createapplications without having to write to specific platform

components (such as middleware and databases) becausetheyre built into the platform. PaaS essentially enables thedeveloper to build their applications, define their functionaland non-functional requirements, and deploy their applicationswithout having to deal with installing, configuring, or integratingmiddleware.

PaaS is built on virtualization that provides the ability toabstract the underlying services, such as middleware, operat-

ing systems, and hypervisors. Because of the virtualization ofthese services, each developer is provided with an image ofthe combined services. Therefore the developer doesnt haveto deal directly with complex services and middleware unless they want to be exposed to the details.

Developing in a PaaS environment is different than the waydevelopment organizations have designed software over thepast few decades. In a traditional model, the development

team may select a variety of different tools operating sys-tems, middleware, security products, and the like. If the teamis very experienced this is a fine choice. Many organizationshave been very effective with this approach. However, typi-cally there are problems of managing complexity especiallyin an era where more and more aspects of daily life are con-trolled by software. (Even the typical car has millions of linesof software.)

Integrated lifecycle servicesWhile clearly developing applications and solutions for thecloud is different from building software intended for the datacenter, some commonalities exist. Like any good applicationdevelopment process, there needs to be a focus on managingthe lifecycle. The integrated lifecycle services include

Developer and tester collaboration services

Application versioning

Application configuration management

In PaaS environments, its important to manage not only thedevelopment of an application but also the lifecycle of thatapplication. While you can purchase an individual development



32/74

, , y p


tool, the typical PaaS environment includes the softwaredevelopment tools, the testing environment, a workflow

engine, configuration management, and applicationsmanagement tools.

Because the PaaS lifecycle services are standardized, thedevelopment of consistent services is easier. For example,configuration management is built into the platform. Likewise,workflow regarding how the development lifecycle isintended to work is part of the environment. Developers havea self-service portal to provision additional services and to

manage the development process across private and publicclouds as well as within the data center. This can beaccomplished through standardized templates (based onwell-proven best practices) that predefine applicationservices and how they relate to each other. These templatescan be used to define who has access to which code based onroles and responsibilities. For example, middleware servicesprovide a centralized way to control the deployment,management and monitoring of the development and

deployment of applications.

Workload management services

One of the most important characteristics of building anddeploying applications in the cloud is to be able to managethose workloads. A workload is an independent service orcollection of code that can be executed. Two primary services

for managing workloads exist in a PaaS environment:

Dynamic workload management

Fine grained Service Level Agreements (SLAs) to ensurethat mission critical applications are given priority

In a well-designed PaaS environment, the critical elementsneed to be packaged so they can execute in the most efficientmanner. But all workloads arent the same. There are batchworkloads (processing large amounts of data), real timeworkloads (real time data feed), and analytic workloads(analyzing complex customer information). For moreinformation on workloads, check out Chapter 3.

In all types of cloud environments, its typical that youll havemany workloads running in parallel. In the hybrid cloud, there



33/74

, , y p


are complex integration and management issues. This is truebecause in a hybrid world theres the requirement to optimize

cost and capacity requirements across different platforms public, private, and data center. Therefore, its importantto make sure that these workloads are well balanced. Therewill be times, for example, where a specific application run-ning in the cloud will need to be given more resources andpriority over an occasionally used workload. This can beaccomplished by tuning the hardware, operating system,middleware, development, and deployment environment asa unit. Tuning the environment can more effectively manage

workloads. Therefore, this type of workload management hasto be integrated into the PaaS environment. Without theability to balance all types of workloads, the platform wontbe practical in an enterprise environment.

Data management servicesA typical cloud environment is tied not only to the data within

a specific application but also in line of business applicationsrunning in the data center, e-commerce applications, andother customer facing environments. This data comes in allshapes and sizes. There may be transactional data, customerdata, as well as various kinds of unstructured data based oneverything from images to document content. Being able tomanage the flow of this data is a critical issue in the PaaSenvironment. To accomplish this goal, the following servicesmay be leveraged:

Master data management (consistent definitions)

Data integration and virtualization

Data protection (ensuring security of the data)

Data mobility (the ability to move data to where itsneeded)

Data quality

Some data may be stored in a SaaS application, such as a CRMapplication in a public cloud, while other data sources may beprivate and will be managed in the private cloud or within thedata center. The PaaS environment provides data integrationservices that support integration between clouds, within thecloud, and between the cloud and on premises environments.



34/74

, , y p


Linking BusinessServices Together

Each type of cloud contains a series of services that must bewoven together to complete a business task. Whether youleverage a private cloud or a public cloud, or both, you needto have a way to intelligently manage the processes that makethese environments a critical component in an evolvingbusiness strategy. What do we mean by this?

Business process thinking and awareness is fundamental toany type of cloud environment. Its important to understandthe underlying processes that are an integral part of howyour business is conducted. Some processes are so commonthat you may not even think of them as business process as aservice. For example, many companies use an online serviceto handle payroll services. While there are elements of SaaS,the primary driving force behind this type of capability is

process. Some employees are paid weekly or monthly. Theresa process thats standardized based on a companys businessrules. An employees deductions based on taxes, socialsecurity, and his portion of benefits is automatically deductedfrom the amount the employee is paid. But other complexitiesare thrown in the mix.

In some situations, payment services must receive informationfrom human resource systems that indicate changes in the

employees salary amount (deductions for a leave of absence,a commission payment, or a salary increase). In essence, theentire process of managing payments to employees becomesa set of business processes that are embedded into the hybridcomputing environment. The accounting system that subtractssalaries from the cash on hand is managed in the traditionaldata center. The human resource system that keeps trackof vacations, performance reviews, and other incentivesare managed in a SaaS environment. The sales management

system is yet another SaaS application that operates in thecloud.

The cloud has added a new layer of complexity to traditionalbusiness process management software (BPMS) because itsnecessary to integrate many different applications andbusiness services together to accomplish critical businesstasks. These linkages typically need to be made across public



35/74

, , y p


and private clouds and the data center. For more details onintegration in the cloud, see Chapter 5.

The ability to manage business processes across clouds willcontinue to grow. Today we see common services, such aspayment services, unified communications, collaborationservices, and the like available within the cloud. Manyorganizations are increasingly leveraging these types ofservices not just for their internal needs but to createinnovative business initiatives that involve partners,suppliers and customers.

Computing services are defined by the processes theysupport whether they live in the data center, public orprivate clouds. None of these services live in isolation.Theyre becoming the tools to support new ways to roll outbusiness innovation. In essence, with the movement to serviceorientation, companies are starting to think of their computingresources no matter where they reside as a set of assetsthat can be reshaped to create new business models.

Improving productivityCompanies are leveraging cloud computing to improve theproductivity of their business process workflows. Many ITorganizations are on a journey to streamline workloads byadding automation to traditionally stove-piped systems. Inthis scenario, IT takes on the role of abstracting the services

that define the core of the business. This may involve creatingbusiness services that encapsulate processes used repeatedlythroughout the business. IT may also take on the role ofproviding interfaces between systems of record with newservices that may be cloud based. The net result is that bothIT and business management can quickly and easily implementchanges to vital business processes.

The Cloud as catalyst forbusiness transformationITs new value-add consists of helping the business roll outnew innovative processes that leverage the partner, supplier,and customer ecosystems in ways that improve the bottomline. To accomplish this objective requires that IT moves from



36/74

, , y p


a focus on silos of systems to creating a set of services thatcan be linked together based on business process. In the new

world, IT becomes a provider of abstractions and automationthat enable the silos between systems to start breaking down.

What would this look like? Take an example of an insurancecompany that relies on partners thousands of independentagents. Because the agents are independent, theyre freeto work with any company that offers them better ways toincrease their revenue. The insurance company understandsthe challenge and knows that IT can be the secret to their

success with agents. The insurance company created its ownprivate cloud that was available only to its agents and theircustomers. The portal provides standard services such asbilling, contracts, and other business processes that taketime to create internally. However, this isnt unique. Manyinsurance companies offer these same back office functionsto agents. To differentiate its services for agents, the insurancecompany provides the agent with a real time quoting andcontract service. Because agents are able to provide a higher

level of service than competitors, they remain loyal to theinsurance company.

At the same time,

Documents

Private Cloud for Dummies